Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/R-x6zROgdHz9hV6pJxyGynY0QrU.roa
File: R-x6zROgdHz9hV6pJxyGynY0QrU.roa (raw, json)
Hash identifier: WMtrdMFTuM1IjAzMPTkeY5h1x93xM3lr7pvmc98Z7vI=
Subject key identifier: 47:EC:7A:CD:13:A0:74:7C:FD:85:5E:A9:27:1C:86:CA:76:34:42:B5
Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial: 0192D3F22FA6D96B30A21D1989E506736168
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/R-x6zROgdHz9hV6pJxyGynY0QrU.roa
Signing time: Mon 28 Oct 2024 16:25:17 +0000
ROA not before: Mon 28 Oct 2024 16:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211607
IP address blocks: 195.230.103.0/24 maxlen: 24
216.25.124.0/24 maxlen: 24
216.25.125.0/24 maxlen: 24
2001:678:e70::/48 maxlen: 48
2a10:b640:3000::/36 maxlen: 48
2a10:b641::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:f2:2f:a6:d9:6b:30:a2:1d:19:89:e5:06:73:61:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Validity
Not Before: Oct 28 16:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47ec7acd13a0747cfd855ea9271c86ca763442b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:fb:84:96:0d:2a:ca:2a:f6:b0:4f:e9:67:
79:65:30:fd:2a:22:c6:4b:90:bd:19:27:7c:36:d7:
11:8d:ff:e1:f9:b4:90:16:4a:54:28:c2:bb:4d:71:
fa:51:4b:25:1e:51:b5:18:b4:9e:cc:71:fb:84:c2:
0f:f7:11:8e:57:0f:84:26:fe:3b:60:41:7d:c5:71:
2b:d5:fd:24:6c:63:d7:d5:22:9a:08:cb:94:06:6e:
73:3d:02:d4:e5:f0:63:7d:05:a9:4f:93:ab:46:06:
a6:1b:12:b9:6e:34:2d:43:1e:0d:cd:92:06:38:4a:
c2:69:58:61:4f:73:9a:b8:fa:f0:63:9c:16:37:d3:
5e:68:af:47:db:c2:59:d9:01:74:24:39:7f:91:f2:
0b:fe:ce:bf:5e:e7:b4:2a:e4:52:be:e0:61:70:25:
eb:a0:c8:f1:68:bb:33:55:0f:64:be:ed:39:e1:94:
cd:2b:b3:4c:f0:6d:8a:a2:76:54:14:ae:e1:d2:15:
d2:24:2f:db:0e:2e:a3:06:cf:ab:7d:cb:60:69:38:
a1:b8:b2:8e:38:46:32:f2:90:e6:38:d3:3c:be:4c:
a4:be:91:63:92:02:de:0d:ed:62:2a:b0:be:5f:05:
7f:21:2c:78:4b:c0:87:0d:a9:44:92:46:b7:9b:53:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EC:7A:CD:13:A0:74:7C:FD:85:5E:A9:27:1C:86:CA:76:34:42:B5
X509v3 Authority Key Identifier:
keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/R-x6zROgdHz9hV6pJxyGynY0QrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.103.0/24
216.25.124.0/23
IPv6:
2001:678:e70::/48
2a10:b640:3000::/36
2a10:b641::/36
Signature Algorithm: sha256WithRSAEncryption
1b:d7:db:48:1f:18:95:3f:a3:60:6a:05:b5:b6:df:41:68:9f:
27:35:05:be:0b:22:10:54:aa:58:81:62:17:22:6a:cf:f6:ce:
5a:ad:28:c8:01:a7:c5:51:b5:61:19:3a:9a:88:d9:d0:fc:8f:
49:9c:cb:c9:8d:22:bb:87:42:7e:23:bb:d6:53:7e:13:04:c6:
e0:0a:d5:0f:98:b9:4f:dd:e1:35:b4:a8:8f:6b:05:81:f3:13:
a2:4c:13:ac:b4:9e:ba:a7:d1:11:83:2a:24:13:ec:81:04:6e:
02:cb:6b:02:3b:a5:1f:e8:78:05:54:70:dd:e6:46:4c:91:25:
90:5e:bc:bb:cb:ff:58:09:be:0a:4a:bc:1a:2c:28:45:9b:3a:
b3:7c:b8:93:1b:68:c3:2a:d4:eb:7c:70:22:d9:f7:f5:3d:c8:
43:e4:c6:0a:38:c5:6d:7f:9b:a3:cd:97:0d:5f:07:2e:99:ac:
23:f1:02:c9:5d:b7:5a:8e:c7:b7:b7:46:15:50:b5:45:6a:2c:
9a:2f:3d:24:41:27:cb:f5:f9:5c:6d:35:a5:50:9f:6e:bb:6a:
3a:a3:a2:d5:4e:3c:e0:d2:bf:b5:a1:61:ec:07:d9:1b:fc:89:
88:84:b1:38:56:20:55:89:71:dd:78:fb:aa:81:fa:c8:53:a5:
f3:1f:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:18 2024 by rpki-client on console-ams.rpki-client.org